Cloud Security Engineer

🕒 Setembro 18

🏈 Ohio – Remoto

🏈 Ohio – Remote

💵 $115.000 - $150.000 / ano

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 12%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Gifthealth

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

Fundada em 2020

🏥 Saúde

📦 Logística

💼 Consultoria

💰 $40.000.000 Private Equity Round - GiftHealth em 2023-04

Healthcare • Logistics • Consulting

A Gifthealth é uma empresa de acesso a pacientes e realização de prescrições apoiada por tecnologia que conecta pacientes, prescritores, farmácias e fabricantes farmacêuticos por meio de uma plataforma digital unificada. Ela simplifica o processo de cadastramento, verificação de benefícios eletrônicos, autorização eletrônica prévia e suporte de pagamento/acessibilidade, enquanto gerencia o cumprimento das farmácias e os serviços de apoio ao paciente. A plataforma também fornece aos fabricantes dados valiosos e insights sobre as jornadas dos pacientes e o desempenho das marcas, promovendo um acesso a medicamentos mais rápido e confiável.

Descrição

• Develop and maintain security standards and reference architectures for cloud environments • Participate in architecture reviews for new cloud services, platforms, and major infrastructure changes • Evaluate proposed architectures for security risks and recommend appropriate controls • Establish secure patterns for cloud networking, identity, encryption, logging, storage, compute, and managed services • Evaluate security boundaries between AWS-managed infrastructure and externally managed platforms such as Heroku and Snowflake • Identify insecure cloud configurations and excessive permissions • Assess cloud environments against security standards and benchmarks • Prioritize and coordinate remediation of cloud security findings • Establish least-privilege access models and controls for administrative and privileged cloud access • Develop security controls and configuration baselines for compute, storage, databases, networking, serverless services, VPNs, data warehouses, APIs, and secrets management • Implement cloud security guardrails with engineering teams • Ensure cloud logging and security telemetry support monitoring • Develop or assist with detections for suspicious cloud activity • Partner with Security Operations to investigate cloud security events • Embed security requirements into Infrastructure-as-Code • Develop automated checks, preventative controls, reusable secure modules, and templates • Automate security processes using APIs, scripts, and cloud-native services • Support vulnerability management across cloud infrastructure and workloads • Coordinate vulnerability remediation with infrastructure and engineering teams • Develop cloud security standards and technical requirements • Map cloud controls to security and compliance requirements • Provide technical evidence for audits and assessments • Evaluate AI-enabled cloud services such as Amazon Q for security and data-handling implications • Collaborate regularly with Infrastructure, Platform Engineering, DevOps, Software Engineering, IAM, and Security teams • Report to the Director of Security

🎯 Requisitos

• 3+ years of experience in cloud engineering, cloud security, infrastructure engineering, DevOps, security engineering, or a related field • Hands-on experience securing environments within at least one major public cloud platform • Strong understanding of cloud IAM, networking, encryption, secrets management, logging and monitoring, compute and storage security, vulnerability management, and cloud-native security services • Ability to secure workloads across a hybrid environment spanning AWS and externally managed platforms such as Heroku and Snowflake • Experience scripting or automating infrastructure and security activities • Understanding of least privilege and cloud-native identity models • Ability to evaluate cloud architectures and communicate security requirements clearly to technical teams • Must be able to work at a computer for extended periods • Must be able to communicate effectively, verbally and in writing • Must be able to handle and access sensitive cloud infrastructure and security data in compliance with organizational requirements • Must be able to respond to critical cloud security incidents outside standard working hours when required • Relevant AWS, cloud security, Kubernetes, or security certifications are a plus, but not required • Preferred: strong AWS security experience, including multi-account cloud environments • Preferred: experience with Kubernetes, containers, or serverless technologies • Preferred: experience with CSPM or CNAPP platforms and familiarity with CIS cloud benchmarks, NIST guidance, or other cloud security frameworks • Preferred: familiarity with Site-to-Site and client VPN architectures • Preferred: experience with column-level masking, row-level security, or PHI field-level governance in Snowflake or BigQuery • Preferred: experience with Terraform or CloudFormation and preventative cloud guardrails • Preferred: experience working within regulated environments

🏖️ Benefícios

• Full-time employment • Standard business hours • Flexibility for cloud security incident response or urgent remediation of high-risk findings • Equal Opportunity Employer committed to an inclusive environment

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo